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Amendments to the Specification: 

Please replace paragraph [0022] with the following amended paragraph: 

[0022] Figure 2 is a block schematic diagram of an exemplary system 200 to protect a file 

system from a viral infection in accordance with an embodiment of the present invention. The file 
system protected may be either a local file system or system memory 202 or a remote, shared or 
network file system 204, or both. Elements of the method 100 may be embodied in the system 200, 
such as in a file system protection program (FSPP) 206 associated with the local file system 202, 
FSPP 208 associated with the remote or shared file system 204 or FSPP 210 that may be associated 
with a network server or processor 212. 

Please replace paragraph [0024] with the following amended paragraph: 

[0024] The data and other files 226 228 may include a safe list 234 and a log 236. The safe 

list 234 may include a pre-loaded list of programs, such as File Explorer, a Visual screen-based 
editor (vi) and Editor MACros (emacs), or the like, that are safe to permit file system operations 
when called or required by any programs in the safe list. In one embodiment of the present 
invention, an administrator or user may be permitted to add or delete programs from the safe list 
234. 

Please replace paragraph [0026] with the following amended paragraph: 

[0026] As previously discussed, the logged information associated with an alert or flagged 

program may also be sent to a network monitoring system 238. The network monitoring system 
238 may operate on a server or processor 212. The network monitoring system 238 may receive 
alerts from multiple computer systems, such as computer system 214. The network monitoring 
system 238 may analyze the alerts from multiple systems and identify an attack in progress when the 
network monitoring system 238 recognizes similar alerts from multiple computer systems. In this 
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fashion, the system 200 may use the alerts for self-monitoring and to take corrective action and 
perform any needed changes or repairs to provide a self-healing system or network. 
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